What changed, and why it matters
This commit only adds documentation to the release notes. It describes a new BOLT 12 invoice feature that was added in a previous code change, and explicitly notes that signature verification is not yet implemented. There is no code change in this commit, so it does not introduce, fix, or enable any security issue by itself.
No action required. This is a documentation-only release note update. If reviewing the referenced PR #10941, ensure that callers are indeed verifying Schnorr signatures independently until the planned verification primitives are added.
Security signals we found
No strong security signals were identified.
Evidence from the diff
The commit is a documentation-only change to docs/release-notes/release-notes-0.22.0.md. It adds a release note entry for the BOLT 12 invoice codec (PR #10941), mentioning that the invoice TLV message was added to the bolt12/ package with structural reader/writer validation, and that Schnorr signature verification is not yet performed. The diff contains no executable code, no bug fix, and no security patch.
Changed components
docs/release-notes/release-notes-0.22.0.mdInspect captured patch +7 / −0
diff --git a/docs/release-notes/release-notes-0.22.0.md b/docs/release-notes/release-notes-0.22.0.md
index 8c33776..72b36ed 100644
--- a/docs/release-notes/release-notes-0.22.0.md
+++ b/docs/release-notes/release-notes-0.22.0.md
@@ -99,6 +99,13 @@
in `SubscribeOnionMessages`, ensuring a nil reply path remains nil in the
RPC response rather than being emitted as an empty struct.
+* [BOLT 12 invoice
+ codec](https://github.com/lightningnetwork/lnd/pull/10941): add the
+ `invoice` TLV message to the `bolt12/` package with structural
+ reader/writer validation. Schnorr signature verification is not yet
+ performed; callers must verify the signature independently until the
+ Merkle and signing primitives land.
+
## Testing
## Database
Why this scored 15/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.